Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/30/46cf2c-5bea-4861-8e5d-40989d0dfc5c/1/CCEA8LGZHYCkZCHZ_lFH8tVayTA.mft
File:                     CCEA8LGZHYCkZCHZ_lFH8tVayTA.mft (raw, json)
Hash identifier:          EknMX2BJrRhbwIHY9RMmI62Zu+KulzZlv8CxF1OleWo=
Subject key identifier:   84:32:16:38:1D:2E:45:8B:7F:3F:19:45:30:C5:C7:B7:8E:97:77:1A
Authority key identifier: 08:21:00:F0:B1:99:1D:80:A4:64:21:D9:FE:51:47:F2:D5:5A:C9:30
Certificate issuer:       /CN=082100f0b1991d80a46421d9fe5147f2d55ac930
Certificate serial:       01A0C1B1EB7B9E65F45927EEC9AD939FACE5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CCEA8LGZHYCkZCHZ_lFH8tVayTA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/30/46cf2c-5bea-4861-8e5d-40989d0dfc5c/1/CCEA8LGZHYCkZCHZ_lFH8tVayTA.mft
Manifest number:          0655
Signing time:             Mon 21 Sep 2026 02:00:57 +0000
Manifest this update:     Mon 21 Sep 2026 02:00:57 +0000
Manifest next update:     Tue 22 Sep 2026 02:00:57 +0000
Files and hashes:         1: 1-oF-we2cmHSHaID5tDY175ejYyc.roa (hash: dJ5RifzmXnjb10Iv95+voBaC+89de9KOSKWwWpiVAmQ=)
                          2: CCEA8LGZHYCkZCHZ_lFH8tVayTA.crl (hash: aslGtasP2eNpUzMpcEbvgtoeI2FCP1b5M7VICY+cn40=)
                          3: tSi7rgFlmfh1P4HXVwQwVPU47ak.roa (hash: a+hi0S0VRR6DQeW+YfoSxvunfpCb33mxDCeififJ5+A=)
                          4: wOsJVEziUaOvFA1iNE3ry9kPQfE.roa (hash: FAa7Ewjlb7OE+5koslUqaQRcv1OSsbCB7gnK+sa/8FI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/30/46cf2c-5bea-4861-8e5d-40989d0dfc5c/1/CCEA8LGZHYCkZCHZ_lFH8tVayTA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/30/46cf2c-5bea-4861-8e5d-40989d0dfc5c/1/CCEA8LGZHYCkZCHZ_lFH8tVayTA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/CCEA8LGZHYCkZCHZ_lFH8tVayTA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 21 Sep 2026 23:00:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:c1:b1:eb:7b:9e:65:f4:59:27:ee:c9:ad:93:9f:ac:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=082100f0b1991d80a46421d9fe5147f2d55ac930
        Validity
            Not Before: Sep 21 02:00:57 2026 GMT
            Not After : Sep 22 02:00:57 2026 GMT
        Subject: CN=843216381d2e458b7f3f194530c5c7b78e97771a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:e1:99:82:bf:51:4f:34:b3:c1:2b:13:c1:58:
                    b5:e7:99:42:f9:3d:f7:b7:a4:a6:57:dd:58:f4:36:
                    c5:0d:6f:3a:d3:af:66:66:d4:5a:2f:bf:d8:89:c4:
                    41:ef:fa:d8:c2:bf:ba:7f:d2:00:f0:e6:0f:e6:87:
                    1a:ae:2c:99:5e:67:53:96:b5:11:d9:5e:10:1e:5c:
                    66:bb:f3:f0:7f:e6:99:49:d2:af:12:3d:79:65:2a:
                    71:97:c1:f8:0a:3c:b8:07:fc:a0:56:5d:c4:07:cd:
                    e3:cc:25:ad:1e:f5:dc:46:bb:46:cf:ea:41:5e:06:
                    1b:a1:37:66:21:19:fa:54:96:6e:e8:0d:bc:eb:2d:
                    c2:7b:0f:60:e6:15:b2:49:ff:76:26:76:d2:cb:86:
                    90:7a:79:b4:d6:b2:85:8a:1d:b0:10:fd:00:34:92:
                    76:65:3b:fb:f6:01:3a:44:8f:bc:58:67:ee:1f:57:
                    ad:00:af:88:ad:66:36:22:11:96:10:1c:7b:57:81:
                    bf:74:b5:6d:84:5a:93:94:a3:f8:76:f2:af:54:03:
                    ca:b0:37:ee:2a:61:13:46:96:2f:8b:59:7c:17:ef:
                    2e:4c:90:11:c3:37:90:b3:0a:34:3c:53:b7:0d:71:
                    d8:c7:27:58:07:4f:cb:3c:fe:20:82:75:d2:ab:47:
                    e6:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:32:16:38:1D:2E:45:8B:7F:3F:19:45:30:C5:C7:B7:8E:97:77:1A
            X509v3 Authority Key Identifier:
                keyid:08:21:00:F0:B1:99:1D:80:A4:64:21:D9:FE:51:47:F2:D5:5A:C9:30

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CCEA8LGZHYCkZCHZ_lFH8tVayTA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/46cf2c-5bea-4861-8e5d-40989d0dfc5c/1/CCEA8LGZHYCkZCHZ_lFH8tVayTA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/30/46cf2c-5bea-4861-8e5d-40989d0dfc5c/1/CCEA8LGZHYCkZCHZ_lFH8tVayTA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0c:36:c7:b7:f4:d5:0d:a1:18:70:e4:e1:a4:b6:0f:aa:c6:7e:
         d2:42:e9:a0:58:d4:93:1e:26:a7:ab:ce:fa:e8:14:7a:78:97:
         1a:30:34:8d:ce:5d:2b:89:75:f4:7f:ea:10:81:a8:a4:4d:1d:
         b2:9e:d4:e6:c7:7a:64:02:ce:f6:c2:c6:20:0d:b1:38:75:f8:
         40:d2:14:5a:e1:53:27:30:b3:df:ad:29:a7:3d:41:34:ff:1b:
         87:5b:ac:f4:7f:eb:37:4e:5a:df:6a:be:09:47:55:27:22:97:
         4c:a6:f4:e6:3d:60:59:85:e8:fb:e4:c3:d0:35:48:f0:bc:99:
         0b:fe:99:d7:a9:2e:67:19:dd:cd:22:92:d9:e3:6a:cb:e5:97:
         31:60:1e:cb:1c:65:80:b4:c7:79:e4:22:f3:91:b4:5e:f3:7d:
         cb:fc:de:3e:67:fa:1e:52:88:aa:08:3d:c5:bb:2a:18:9f:9b:
         23:fd:3b:28:1f:ff:f6:83:d8:19:f9:b2:fa:38:07:5b:0f:f8:
         61:3f:54:e1:fc:ce:0f:0b:07:43:40:bb:11:6a:27:4e:16:bc:
         98:19:4b:81:61:c5:34:09:3a:60:cd:9a:b7:91:ab:ff:f7:cb:
         78:0a:b8:ca:0e:2f:05:db:f9:0f:02:da:3a:a3:0b:9b:1d:86:
         5b:e4:9b:04
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDBset7nmX0WSfuya2Tn6zlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA4MjEwMGYwYjE5OTFkODBhNDY0MjFkOWZlNTE0N2YyZDU1
YWM5MzAwHhcNMjYwOTIxMDIwMDU3WhcNMjYwOTIyMDIwMDU3WjAzMTEwLwYDVQQD
Eyg4NDMyMTYzODFkMmU0NThiN2YzZjE5NDUzMGM1YzdiNzhlOTc3NzFhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAteGZgr9RTzSzwSsTwVi155lC+T33
t6SmV91Y9DbFDW86069mZtRaL7/YicRB7/rYwr+6f9IA8OYP5ocariyZXmdTlrUR
2V4QHlxmu/Pwf+aZSdKvEj15ZSpxl8H4Cjy4B/ygVl3EB83jzCWtHvXcRrtGz+pB
XgYboTdmIRn6VJZu6A286y3Cew9g5hWySf92JnbSy4aQenm01rKFih2wEP0ANJJ2
ZTv79gE6RI+8WGfuH1etAK+IrWY2IhGWEBx7V4G/dLVthFqTlKP4dvKvVAPKsDfu
KmETRpYvi1l8F+8uTJARwzeQswo0PFO3DXHYxydYB0/LPP4ggnXSq0fmvQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIQyFjgdLkWLfz8ZRTDFx7eOl3caMB8GA1UdIwQY
MBaAFAghAPCxmR2ApGQh2f5RR/LVWskwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ0NFQThMR1pIWUNrWkNIWl9sRkg4dFZheVRBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC80NmNmMmMtNWJlYS00ODYxLThlNWQt
NDA5ODlkMGRmYzVjLzEvQ0NFQThMR1pIWUNrWkNIWl9sRkg4dFZheVRBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMC80NmNmMmMtNWJlYS00ODYxLThlNWQtNDA5ODlkMGRmYzVj
LzEvQ0NFQThMR1pIWUNrWkNIWl9sRkg4dFZheVRBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADDbHt/TV
DaEYcOThpLYPqsZ+0kLpoFjUkx4mp6vO+ugUeniXGjA0jc5dK4l19H/qEIGopE0d
sp7U5sd6ZALO9sLGIA2xOHX4QNIUWuFTJzCz360ppz1BNP8bh1us9H/rN05a32q+
CUdVJyKXTKb05j1gWYXo++TD0DVI8LyZC/6Z16kuZxndzSKS2eNqy+WXMWAeyxxl
gLTHeeQi85G0XvN9y/zePmf6HlKIqgg9xbsqGJ+bI/07KB//9oPYGfmy+jgHWw/4
YT9U4fzODwsHQ0C7EWonTha8mBlLgWHFNAk6YM2at5Gr//fLeAq4yg4vBdv5DwLa
OqMLmx2GW+SbBA==
-----END CERTIFICATE-----
Generated at Mon Sep 21 09:38:24 2026 by rpki-client